Commit Graph
2050 Commits
Author SHA1 Message Date
breken 64ae230d23 fix(rules): decode percent-encoded PATH rule patterns before matching
isPathAllowed decodes the incoming request path (and Badger already sends
Go's decoded req.URL.Path), but compared it against the rule pattern as raw
text. isValidUrlGlobPattern rejects raw spaces and non-ASCII and only accepts
them percent-encoded, so a PATH rule such as `/my%20docs/*` or `/caf%C3%A9`
was stored as `my%20docs` / `caf%C3%A9` and compared against `my docs` /
`café`, and could therefore never match any request.

Run the pattern through the same decodeAndResolvePath normalisation as the
request path so both sides are compared in decoded form.

Claude-Session: https://claude.ai/code/session_0134ujLF81GyXsCByibLcYsz
2026-09-13 19:00:59 -07:00
Owen 063f6b5ca9 Basic DNS config send empty for olm 2026-09-04 12:31:04 -04:00
Owen 54bbe82504 Dont log invalid message type
Fixes #3695
2026-09-04 09:06:58 -04:00
Owen 4dada38cb0 Please eslint 2026-09-03 10:51:46 -04:00
Owen Schwartz c36cf698c1 Merge pull request #3627 from fosrl/feat/ip-filtering
feat: Add IP column filtering to tables
2026-08-31 16:59:34 -04:00
miloschwartz 39722d30af resolve security-key login only for a unique internal user 2026-08-31 14:39:36 -04:00
miloschwartz 8aef14cf9f harden initial server-admin setup against duplicate users and races 2026-08-31 12:36:42 -04:00
Owen Schwartz ed0d6fb6b9 Merge pull request #3644 from fosrl/dev
1.22.0-s.2
2026-08-26 11:30:38 -04:00
Owen a02d16fd58 Handle compression of ai session logs 2026-08-26 11:28:14 -04:00
Owen Schwartz 5bdb12dafe Merge pull request #3643 from fosrl/dev
1.22.0-s.1
2026-08-26 10:53:37 -04:00
Owen e57826d6e0 Session logs and usage logs should use seconds not ms 2026-08-26 10:50:16 -04:00
miloschwartz 3d4e143c1f normalize key in rate limiters 2026-08-26 10:25:29 -04:00
miloschwartz 10a25c184d fix get /site-resource/:siteResourceId always returning 400 2026-08-26 10:03:39 -04:00
miloschwartz 9a5824900d strip encrypted ssh key from org response 2026-08-26 09:39:05 -04:00
Owen Schwartz f3474dac98 Merge pull request #3641 from fosrl/dev
1.22.0
2026-08-25 17:19:46 -04:00
Fred KISSIE d00b9478a2 Merge branch 'dev' into feat/ip-filtering 2026-08-24 22:06:55 +02:00
Fred KISSIE 4ddf36ebcc 💄 some last UI fixes 2026-08-24 20:39:30 +02:00
Owen 5b782a842c Fix #2937 2026-08-24 11:42:35 -04:00
Owen 8ae42e1852 Fix list users not respecting policy
Fixes #3632
2026-08-24 11:18:09 -04:00
Fred KISSIE adfb6003d9 Merge branch 'dev' into feat/ip-filtering 2026-08-21 23:24:09 +02:00
Owen eca1c9044c Rename siteResourceId to resourceId 2026-08-21 15:24:20 -04:00
Owen 4229ef9173 Change log to warn 2026-08-21 14:03:36 -04:00
Owen d5ea0ecbc1 Include user in the request logs 2026-08-21 13:50:56 -04:00
Owen 59f286299e Move the request log to be public 2026-08-21 13:41:45 -04:00
Owen 442cefda84 Dont allow clients to connect to remote nodes quite yet 2026-08-21 12:25:14 -04:00
Owen e3e1508e8a Handle warning and no routing to remote exit nodes for ai providers 2026-08-21 12:09:22 -04:00
Owen 2e87927b83 Remove unused use_subdomain 2026-08-21 10:21:21 -04:00
Fred KISSIE 65e4fe91b9 🚧 wip: add ip is column filter 2026-08-20 23:59:31 +02:00
Owen e65a79cc48 Rename to v1_models and use with openai as well 2026-08-20 16:01:07 -04:00
Owen 365a905e69 Add more data to the models catalog list 2026-08-20 15:17:48 -04:00
Owen bafbf6e096 Add anthropic_models capability 2026-08-20 14:28:19 -04:00
Owen c1caa30cb9 Move session logs to private 2026-08-19 17:25:32 -04:00
Milo Schwartz fd0a0818c1 Merge pull request #3617 from fosrl/dev
Dev
2026-08-19 16:41:48 -04:00
Owen ef051c2f8c Dont count usage when the response was not successful 2026-08-19 15:59:01 -04:00
Milo Schwartz 929acc5b1c Merge pull request #3614 from fosrl/dev
Dev
2026-08-19 12:05:12 -04:00
Owen 437ec50019 Update the usage records to use logs db 2026-08-19 12:03:30 -04:00
Milo Schwartz 71348f45b2 Merge pull request #3611 from fosrl/dev
1.22.0
2026-08-19 11:26:08 -04:00
miloschwartz e377afe9f6 add id sorting to http request logs 2026-08-19 10:42:23 -04:00
Milo Schwartz bb824a7070 Merge pull request #3541 from fosrl/feat/test-alert-button
Feat: test alert rules
2026-08-19 10:33:16 -04:00
Owen b32dc30050 Also look for niceId 2026-08-18 17:18:25 -04:00
Owen 667804043c Implement cli commands to configure ai clients 2026-08-18 17:12:01 -04:00
miloschwartz bdd7f40688 batch identity key emails 2026-08-18 16:00:07 -04:00
Owen 4be73558d5 Restrict wildcard domains for inference resources 2026-08-18 11:30:44 -04:00
Owen 83cda218b7 Merge branch 'free-me-up' into aig 2026-08-17 14:54:05 -04:00
miloschwartz 0a8b5e46ca Bind share link sessions to the token's own resource 2026-08-17 14:24:21 -04:00
Owen a74b0934fc Allow changing the allow ssh and update shcmea 2026-08-17 14:12:39 -04:00
Owen 87a3e5ceea Generate the cert properly 2026-08-17 13:45:51 -04:00
Owen 555b36e13e Fix target pulling still being private 2026-08-17 13:40:09 -04:00
Owen 749abdcb56 Fix circular import issue 2026-08-17 12:00:13 -04:00
Owen 11daf4f927 Move certificates 2026-08-17 12:00:12 -04:00